$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa File: a33f6b71-e43a-33b7-9936-42af3795589a.roa (raw, json) Hash identifier: hwH0okKNU4vfXgv++zJTUixEFAqxCZO4BhjfB/AJFYQ= Subject key identifier: D6:0A:88:84:4B:EB:6F:A3:61:DC:DB:6D:C4:85:37:5D:2F:19:A6:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC6A7C7894F7D11640E60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c6:a7:c7:89:4f:7d:11:64:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=d54a0126-1a20-459f-b7fb-5b8815dccb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:c3:d3:81:33:45:1c:b5:b3:df:f9:68:7f: 68:ed:3d:97:88:3f:1e:a8:1e:03:90:5d:03:cf:98: df:0e:79:ac:77:b1:c2:84:da:6b:6b:b6:1b:68:ab: e9:12:41:de:f7:58:0f:ec:30:92:fa:32:0c:2f:e5: f4:e0:20:58:b7:38:4a:c9:6d:b9:ad:ac:94:20:21: 6f:c9:f4:1e:a4:6a:dd:80:bd:e2:1a:61:49:0b:0a: c6:dd:8a:4f:1e:d3:e9:a5:88:53:a4:db:30:63:40: 2c:66:ea:c0:cc:07:d6:c9:fd:76:20:fa:75:5e:fd: 31:7c:09:21:18:a2:95:6d:89:d7:e0:b1:88:16:b2: 2c:54:83:2b:fa:b1:45:cc:4e:5c:23:56:19:b5:7e: 72:ef:6d:82:53:0f:89:6a:1f:9a:0c:ce:ce:fb:16: df:d2:29:17:e3:4e:99:c0:63:f1:74:b1:35:e7:17: 8c:0a:78:96:5b:f2:8b:c7:4b:80:0d:39:34:7d:e1: c5:53:41:6e:20:2d:64:30:db:7a:4b:c6:8f:2c:ee: 55:50:4c:92:51:4a:86:94:40:49:f9:73:4b:16:f3: af:bd:83:bf:10:c2:24:ab:b9:cb:71:bb:51:6c:95: 97:04:60:2f:62:b6:cc:33:df:d7:3d:34:57:22:ed: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:88:84:4B:EB:6F:A3:61:DC:DB:6D:C4:85:37:5D:2F:19:A6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a33f6b71-e43a-33b7-9936-42af3795589a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e8:0c:17:3c:b6:2b:bd:1c:5b:0a:aa:c9:70:dd:69:63:35: e0:1f:5c:61:be:c7:e6:5f:5b:ee:c6:96:ec:bf:54:d7:45:14: ef:7d:68:ab:11:56:5f:ec:48:b9:a2:5a:bc:1d:ab:c8:0a:96: fe:9d:d0:e1:5d:b7:70:17:ff:42:b5:b5:6f:c7:bf:c5:ff:24: 16:41:c9:9b:c6:90:2e:40:9f:45:91:35:b8:2c:29:5a:5e:e7: c8:51:e1:9d:a3:58:15:fb:a7:c2:e1:8c:6f:53:01:80:7f:f6: 7a:73:5b:5e:57:74:be:4b:32:bd:fa:c1:58:45:9d:ff:35:2b: ba:10:8b:25:f2:80:df:26:9f:db:dd:fe:11:3b:f6:d5:44:a4: 21:4c:98:74:ea:34:56:b0:80:1f:5d:3c:cd:a7:74:14:1e:17: 5c:a1:e5:f3:59:d0:b2:42:8c:c1:d2:a0:df:6d:36:23:21:83: f6:fe:72:34:63:27:fe:19:6d:9a:8f:9b:0f:08:6b:89:0b:9b: 02:8c:45:0d:62:b0:81:d1:39:cd:22:66:00:e1:9f:6f:2a:b8: fd:7c:44:b0:5f:33:93:eb:85:e2:3e:65:6c:88:fc:07:3c:24: ee:bc:64:aa:ca:eb:9b:11:39:9a:5f:fc:22:22:78:6e:12:56: 4e:07:b6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TManx4lPfRFkDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDU0YTAxMjYtMWEyMC00NTlmLWI3ZmItNWI4ODE1ZGNjYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIPD04EzRRy1s9/5aH9o7T2XiD8eqB4DkF0D z5jfDnmsd7HChNpra7YbaKvpEkHe91gP7DCS+jIML+X04CBYtzhKyW25rayUICFv yfQepGrdgL3iGmFJCwrG3YpPHtPppYhTpNswY0AsZurAzAfWyf12IPp1Xv0xfAkh GKKVbYnX4LGIFrIsVIMr+rFFzE5cI1YZtX5y722CUw+Jah+aDM7O+xbf0ikX406Z wGPxdLE15xeMCniWW/KLx0uADTk0feHFU0FuIC1kMNt6S8aPLO5VUEySUUqGlEBJ +XNLFvOvvYO/EMIkq7nLcbtRbJWXBGAvYrbMM9/XPTRXIu1nBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYKiIRL62+jYdzbbcSFN10vGaZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTMzZjZiNzEtZTQzYS0z M2I3LTk5MzYtNDJhZjM3OTU1ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxineMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPoDBc8tiu9HFsKqslw3WljNeAfXGG+x+ZfW+7Gluy/VNdFFO99aKsR Vl/sSLmiWrwdq8gKlv6d0OFdt3AX/0K1tW/Hv8X/JBZByZvGkC5An0WRNbgsKVpe 58hR4Z2jWBX7p8LhjG9TAYB/9npzW15XdL5LMr36wVhFnf81K7oQiyXygN8mn9vd /hE79tVEpCFMmHTqNFawgB9dPM2ndBQeF1yh5fNZ0LJCjMHSoN9tNiMhg/b+cjRj J/4ZbZqPmw8Ia4kLmwKMRQ1isIHROc0iZgDhn28quP18RLBfM5PrheI+ZWyI/Ac8 JO68ZKrK65sROZpf/CIieG4SVk4HttA= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:37 2026 by rpki-client